VDB

GCVE-110-MAGEIA-2023-97

GCVE-110-MAGEIA-2023-97
Advisory Published
Vulnetix · Advisory published March 18, 2023
ruby-git versions prior to v1.13.0 allows a remote authenticated attacker to execute an arbitrary ruby code by having a user to load a repository containing a specially crafted filename to the product. (CVE-2022-46648, CVE-2022-47318)
Download JSON Open in Console

Affected Products

VendorProductVersionsPlatforms
Mageiaruby-git0 (affected), 1.6.0-1.2.mga8 (unaffected), 0 (affected), 1.6.0-1.2.mga8 (unaffected)—
Mageiabackintime0 (affected), 1.4.1-1.mga9 (unaffected)—

Aliases

CVE-2022-46648CVE-2022-47318

References

Updated ruby-git packages fix security vulnerability
advisory
Updated ruby-git packages fix security vulnerability
issue
Updated ruby-git packages fix security vulnerability
issue
Updated ruby-git packages fix security vulnerability
advisory
Updated backintime packages fix many bugs
advisory
Updated backintime packages fix many bugs
issue
Updated backintime packages fix many bugs
issue

Browse GCVE Records

72,580 records in the GCVE database · Updated July 15, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON
$ Console Community · 100/wk Open console ›